CVE-2024-53956 — Vulnetix

CVE-2024-53956 PUBLISHED

Es besteht eine Schwachstelle in Adobe Creative Cloud Premiere Pro aufgrund eines Heap-basierten Pufferüberlaufproblems. Ein lokaler Angreifer kann diese Schwachstelle zur Ausführung von beliebigem Code ausnutzen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

EPSS 0.23% · 46.5th percentile

Risk Scores

EPSS Score

0.23%

46.5th percentile

Affected Products

Vendor	Product	Versions
Adobe	Adobe Creative Cloud Premiere Pro <24.6.4
Adobe	Adobe Creative Cloud Premiere Pro <25.1

Timeline

Dec 10, 2024 CVE Published
Dec 11, 2024 EPSS Score
Dec 11, 2024 PoC Published
Dec 13, 2024 CVE Updated
Dec 28, 2024 EPSS Score
Jan 13, 2025 EPSS Score
Jan 30, 2025 EPSS Score
Feb 16, 2025 EPSS Score
Mar 5, 2025 EPSS Score
Mar 21, 2025 EPSS Score
Apr 7, 2025 EPSS Score
Apr 24, 2025 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3677 advisory
https://helpx.adobe.com/security/products/media-encoder/apsb24-93.html advisory
https://helpx.adobe.com/security/products/illustrator/apsb24-94.html advisory
https://helpx.adobe.com/security/products/after_effects/apsb24-95.html advisory
https://helpx.adobe.com/security/products/animate/apsb24-96.html advisory
https://helpx.adobe.com/security/products/indesign/apsb24-97.html advisory
https://helpx.adobe.com/security/products/pdfl-sdk1/apsb24-98.html advisory
https://helpx.adobe.com/security/products/connect/apsb24-99.html advisory
https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-100.html advisory
https://helpx.adobe.com/security/products/substance3d-modeler/apsb24-102.html advisory
https://helpx.adobe.com/security/products/bridge/apsb24-103.html advisory
https://helpx.adobe.com/security/products/premiere_pro/apsb24-104.html advisory
https://helpx.adobe.com/security/products/substance3d_painter/apsb24-105.html advisory

Open in Interactive Console →